A step-by-step guide to setting up a 2-of-3 multisig Bitcoin cold storage arrangement using Sparrow Wallet and hardware wallets — the gold standard for protecting significant Bitcoin holdings.
Coinkite makes two Coldcard models: the Coldcard Mk4 (the classic) and the Coldcard Q (the flagship). Both are among the most secure Bitcoin hardware wallets available. The choice comes down to your use case, budget, and how often you sign transactions.
Quick Comparison
| Feature | Coldcard Mk4 | Coldcard Q |
|---|---|---|
| Price | ~$149 | ~$219 |
| Screen | Small OLED | Large color LCD |
| Input | Number pad | Full QWERTY keyboard |
| QR scanning | No | Yes (built-in camera) |
| NFC | Yes | Yes |
| microSD | Yes | Yes |
| Battery | No (USB only) | Yes (standalone operation) |
| Size | Compact | Larger |
| Bitcoin-only | Yes | Yes |
Coldcard Mk4: The Proven Standard
The Mk4 is the fourth generation of the original Coldcard design. It has been battle-tested by security researchers and professional Bitcoiners for years.
Why people choose the Mk4:
- Lower price point ($149)
- More compact — fits in a pocket
- Proven security track record
- Excellent for desk use (plugs into USB)
- Mature firmware with extensive features
Workflow: The Mk4 connects via USB or uses microSD for air-gapped operation (PSBT files). NFC is available for compatible wallet software.
The Mk4's number pad is functional but slower for entering passphrases or text. If you use a long BIP39 passphrase, expect to spend time navigating.
Coldcard Q: The Premium Experience
The Q launched in 2024 and represents a significant UX upgrade without compromising security principles.
Why people choose the Q:
- Full QWERTY keyboard — passphrase entry is fast
- Built-in QR scanner — scan PSBTs and addresses directly
- Large color screen — much easier to verify transaction details
- Built-in battery — fully standalone, no USB required for operation
- Better for frequent use
Workflow: The Q can operate entirely without cables. Scan a PSBT QR code from your watch-only wallet, sign, display the signed QR, scan back. Zero physical connections required.
For multi-sig setups where you're regularly reviewing and signing transactions, the Q's usability improvements justify the price premium.
Security: Are They Different?
Both use the same security architecture:
- Secure Element (ATECC608A) for key storage
- Open-source firmware (fully auditable)
- Duress PIN and brick PIN features
- Anti-phishing words
- True random number generation
The Q adds physical security through its battery (can operate completely offline), but the core security properties are equivalent. Neither is "more secure" in a meaningful way — both are overkill for most use cases.
Air-Gapped Operation
Both devices support air-gapped signing (no USB connection):
Mk4: Uses microSD cards to transfer PSBTs between the device and your computer. Requires a USB microSD reader on your computer.
Q: Uses microSD OR QR codes (camera + display). The QR workflow is faster and eliminates the microSD reader requirement. Simply scan a QR from your watch-only wallet, sign, display the signed QR to be scanned back.
For truly paranoid air-gapped setups, the Q's QR workflow is superior — no physical connection of any kind, no microSD that could theoretically transfer malware.
Multi-Signature Use Cases
For multi-sig setups (2-of-3, 3-of-5), the Q's better display and QR capabilities make it the preferred choice. Coordinating multiple signers is easier when each signer has a device that clearly displays what they're signing.
The Mk4 works fine for multi-sig, but the smaller screen makes transaction verification more cumbersome.
Which Should You Buy?
Buy the Mk4 if:
- You're buying your first Coldcard and want to learn on the cheaper model
- You primarily use it occasionally (not signing daily)
- Budget matters and $70 is significant
- You prefer a smaller, more portable form factor
Buy the Q if:
- You sign transactions regularly (weekly or more)
- You use a long BIP39 passphrase (the keyboard makes this much faster)
- You want the best air-gapped QR workflow
- You're building a multi-sig setup
- You want the flagship device and will use it for years
Frequently Asked Questions
Can I use both devices in the same multi-sig wallet? Yes. Mk4 and Q can both be signers in the same multi-sig setup. They produce compatible PSBTs and signatures.
Will Coinkite discontinue the Mk4 now that the Q exists? As of 2026, both are actively sold and supported. Coinkite has historically provided long-term support for their devices.
Is the Q worth the extra $70? If you use your hardware wallet more than once a month, yes. The QR workflow and keyboard make the Q noticeably more pleasant to use.
Does the Q support Passphrase wallets? Yes, both support BIP39 passphrases. The Q's keyboard makes passphrase entry significantly faster.
Can I upgrade from Mk4 firmware to Q firmware? No — they are different hardware with different firmware. Your seed phrase is portable (you can import the same seed into either device), but the firmware is not interchangeable.
Bottom Line
For most users, the Coldcard Q at $219 is the better long-term investment. The improved UX pays dividends every time you sign a transaction. The Mk4 remains excellent for budget-conscious buyers or those who sign infrequently.
Both are among the most secure Bitcoin hardware wallets available in 2026. You cannot go wrong with either — but the Q is the one you'll actually enjoy using.